
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/D6DCF6420D3B11F19BC83FAA0F3D8C67.roa
File: D6DCF6420D3B11F19BC83FAA0F3D8C67.roa (raw, json)
Hash identifier: m4Jr3uuRCqNgf8md7I8vYpb7gOreEr0nf9WW3w8MQog=
Subject key identifier: D7:E0:D4:09:5A:1E:36:94:1F:BA:BD:2F:98:78:BB:C2:04:AE:3E:04
Certificate issuer: /CN=A91D41AC/serialNumber=EEA901B7FB33FB50CF04C5981F8BEF6C4DEC35E2
Certificate serial: 54
Authority key identifier: EE:A9:01:B7:FB:33:FB:50:CF:04:C5:98:1F:8B:EF:6C:4D:EC:35:E2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/D6DCF6420D3B11F19BC83FAA0F3D8C67.roa
Signing time: Wed 15 Apr 2026 06:40:49 +0000
ROA not before: Wed 15 Apr 2026 06:40:49 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 55573
IP address blocks: 144.79.6.0/24 maxlen: 24
144.79.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.crl
rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D41AC, serialNumber=EEA901B7FB33FB50CF04C5981F8BEF6C4DEC35E2
Validity
Not Before: Apr 15 06:40:49 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69df32f1-d9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fc:c0:01:f2:df:b1:dd:2b:d1:1b:ab:4e:13:
68:f5:96:04:fa:b2:26:e8:a9:0b:17:a5:75:50:0b:
44:34:41:2f:08:9a:56:55:95:99:bc:3f:bf:53:7f:
10:f8:56:9b:f1:88:1a:17:75:17:44:bf:ba:e7:43:
64:42:c8:21:25:df:ba:07:c7:40:07:df:4f:be:18:
e2:f2:b2:b4:43:41:7c:6e:5c:76:43:3f:af:a2:4a:
f6:0c:c8:7a:c1:d2:d9:d2:f3:da:bb:3f:86:f6:e1:
f7:a5:d0:0b:10:69:2b:0c:0f:ae:9b:1d:7f:8c:17:
d1:c7:78:b3:6d:c5:d0:cc:54:4c:25:f5:13:fa:4b:
e0:1a:eb:10:9a:ef:d6:94:89:d0:c9:d4:73:75:49:
59:e0:50:df:71:bf:09:84:d7:a8:a9:99:04:d0:4a:
1e:26:89:64:48:84:8b:66:bd:a6:00:83:80:25:12:
f4:11:5d:5c:cc:08:b3:ad:be:a0:c3:98:5a:4b:26:
7d:e6:73:f0:ec:bb:c0:64:37:bf:ce:63:92:cb:18:
d5:3c:17:19:84:e3:50:23:b3:6e:f8:69:20:6f:0c:
8f:a4:09:87:bf:c3:e0:a7:87:c7:73:74:d4:fe:63:
1e:79:c3:69:94:b0:d9:3d:e3:b2:1d:23:58:88:28:
be:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E0:D4:09:5A:1E:36:94:1F:BA:BD:2F:98:78:BB:C2:04:AE:3E:04
X509v3 Authority Key Identifier:
keyid:EE:A9:01:B7:FB:33:FB:50:CF:04:C5:98:1F:8B:EF:6C:4D:EC:35:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/7qkBt_sz-1DPBMWYH4vvbE3sNeI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7qkBt_sz-1DPBMWYH4vvbE3sNeI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D41AC/A302AB46C68C11F0AD214637C4F9AE02/D6DCF6420D3B11F19BC83FAA0F3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
144.79.6.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:d7:cf:83:61:12:58:b6:da:20:6c:14:ca:5c:b5:6a:25:3c:
47:28:a9:44:e1:ea:a0:bc:cd:8e:3e:5f:42:48:f5:fc:5a:0d:
e0:38:d6:35:9e:bd:76:80:aa:2f:75:84:4e:48:0f:a3:82:28:
47:48:29:0a:b3:61:cb:10:03:d3:62:c6:8b:6d:b9:dc:6a:57:
e7:75:eb:95:ef:bd:4d:cc:2e:fe:5a:30:49:ea:ab:37:40:5d:
38:93:f3:57:32:cc:2b:85:87:44:44:f7:96:81:f5:53:6e:b4:
ab:88:77:43:09:bc:63:3f:ef:9b:81:82:f5:74:d2:8a:10:2b:
f0:7b:fd:a2:90:d6:3d:ce:c2:66:00:7a:c2:78:95:e2:d1:57:
1f:11:c8:c9:11:49:14:60:a5:e5:94:8b:30:3b:5b:50:b7:dc:
2f:b1:99:82:dd:db:36:af:69:69:bb:0e:27:13:22:b5:ec:94:
2d:95:0a:28:c5:65:db:6f:dc:a7:1b:3c:56:2d:e4:39:98:9c:
d8:a8:0d:5d:d6:a2:b4:ed:75:9a:4d:a3:7a:42:27:a5:7a:c4:
1c:bb:b7:4f:90:be:1c:f8:c2:59:5a:74:f9:64:c9:ce:ff:80:
21:df:df:2b:ac:5b:b2:cc:74:bb:9b:58:62:73:fe:0f:2f:a4:
4b:a0:cf:2b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:47:33 2026 by rpki-client